redline | 2364-6-0x0000000000080000-0x000000000009E000-memory[.]dmp

General

Target

2364-6-0x0000000000080000-0x000000000009E000-memory.dmp
Size

120KB
MD5

6b416674baf8b296311a9224f84ca68a
SHA1

f4845ca7a1bfce2e90983d991bc7f74f92f411a0
SHA256

f72dbc86c9f864789ddfc7fb8689eee3130ca70b46d94d66c490a1bbc82f98f1
SHA512

18670187bf22709578b9b961cabf25d312cfe3a96f49f77d1c376637b9bf49dad5a07de37011aaabe96c66465c5e2e737c4a8b8e8c1b18cf300e183553619886
SSDEEP

1536:Vqs+NqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2RteulgS6pw:TqMOY3+zi0ZbYe1g0ujyzd1w

Score

10^/10

Family

redline

Botnet

Exodus

C2

94.156.66.169:1334

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline
SectopRAT payload 1 IoCs

Processes:

resource yara_rule

sample family_sectoprat
Sectoprat family
sectoprat

resource	yara_rule
sample	family_redline

resource	yara_rule
sample	family_sectoprat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2364-6-0x0000000000080000-0x000000000009E000-memory.dmp